Privacy Policy

Last updated: September 25, 2026. TangCraft ("we", "us") operates tangcraft.com.

What we collect

Order information you provide at checkout (name, email, shipping address, phone). Payments are processed by Stripe or PayPal — we never see or store your card details. Basic analytics about site usage.

How we use it

To fulfil your order, contact you about your order, and improve our store. We do not sell your data.

Retention

Order records are kept as long as required for tax and accounting purposes. You may request deletion of non-transactional data at any time via [email protected].

Your rights (GDPR)

Access, rectification, erasure, restriction, portability and objection. Contact [email protected] to exercise them.

Cookies

We use a strictly-necessary session cookie to keep your cart and preferences, and optional analytics. See the cookie banner to manage consent.

Privacy addendum (EU GDPR)

Data controller — identity and contact

The controller for personal data processed on tangcraft.com is TangCraft Studio, （信息更新中 / to be updated）. Registration: （信息更新中 / to be updated）. Contact: [email protected].

International data transfers

We operate from China, and your order and support data are processed there to fulfil your order worldwide. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards — in particular the European Commission's Standard Contractual Clauses. Card payments are handled directly by Stripe or PayPal under their own GDPR-compliant programmes, so we never see your card details.

How long we keep your data

Order records: 10 years (tax and accounting requirements). Page-view analytics logs: 180 days (automated cleanup). Chat and support conversations: 2 years. You may request erasure of your account data at any time by emailing us; we erase it within 30 days, except records we are legally required to keep.

Withdrawing consent

Where processing is based on consent (e.g. analytics cookies), you may withdraw it at any time, free of charge, by emailing [email protected] with the address you used at checkout, or by managing the cookie banner. Withdrawal does not affect the lawfulness of processing carried out before.

Right to lodge a complaint

If you believe your rights under the GDPR have been infringed, you have the right to lodge a complaint with the data-protection supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.